Apache Shiro principal tags before 3.0.2 allow XSS (CVE-2026-129320)
Apache rates the flaw CVSS 4.0 2.1; it needs low privileges and user interaction.
36
Apache rates the flaw CVSS 4.0 2.1; it needs low privileges and user interaction.
Today 1.1K readers · 1.3K views · 248 reads · all time 195K views